Hacker News Reader

It is not clear, do you deploy this in-front of your load balancers, after? They mention CloudFront, but that doesn't make much sense, because you want a WAF to protect your application, not just static assets right?

View on HN

You could have CloudFront in front of your application servers, though, and it could be doing passthrough requests for non-cacheable assets.

Not that I'd ever want this, because CloudFront is dog slow compared to other CDNs, but yeah..

You can put you entire application in front of Cloudfront.

It works better if you do it the other way around ;)

I had not had sufficient coffee before answering the question :D

Reply on news.ycombinator.com